
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa
File: d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa (raw, json)
Hash identifier: tVYrCGLBT/OtjlBJ92zm9/kJwckZryQf0eBCKFWaeNA=
Subject key identifier: C9:09:AA:5F:2A:55:E3:5A:B5:94:63:B1:C9:3A:89:22:01:1A:BF:4E
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F4328584DE9B0BEDA276A9A02F8460980
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa
Signing time: Fri 22 May 2026 01:00:24 +0000
ROA not before: Fri 22 May 2026 01:00:24 +0000
ROA not after: Thu 20 Aug 2026 01:00:24 +0000
asID: 12202
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e9:b0:be:da:27:6a:9a:02:f8:46:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: May 22 01:00:24 2026 GMT
Not After : Aug 20 01:00:24 2026 GMT
Subject: CN=bfe9b0f0-e7a7-41e3-9203-70f58bbb144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:80:18:d6:06:76:b4:96:83:07:0d:e2:bc:
ce:9c:5f:ac:25:9a:f6:d5:a3:f8:78:4e:44:ed:67:
77:5b:3b:83:6a:36:8a:e2:8b:f0:d4:d9:ef:17:ec:
19:12:08:ff:c3:0a:5d:95:06:50:2f:74:ab:69:3e:
fb:5e:89:c5:9d:8b:2f:33:39:fe:09:f3:12:c6:c8:
c9:54:ed:1d:3d:7b:92:cb:e9:b4:cd:a5:51:80:6b:
d9:63:6f:c7:44:11:d4:7e:96:f2:63:4e:7b:bc:f3:
b4:db:d8:3b:6f:16:91:52:ba:0c:06:5d:fd:78:96:
b5:45:f1:95:9e:8f:76:cc:63:60:03:4b:92:59:a4:
7f:de:62:77:89:ae:9b:57:fd:c8:48:8f:2a:e3:31:
0a:0c:b4:85:bb:e4:06:97:de:e7:4f:25:8e:79:22:
9e:53:38:36:df:bd:c8:38:dc:23:8f:bb:15:c0:44:
0d:bf:cc:9d:cc:08:21:42:f4:6f:3c:a0:05:69:c0:
47:7c:ee:92:f8:dc:c8:61:42:c9:f9:0c:ac:53:fc:
fa:2d:de:22:39:32:e8:e4:c8:2b:77:b0:37:cc:1c:
23:bf:99:17:77:13:c9:16:83:41:a6:1c:37:a0:29:
23:74:e2:d9:7a:ad:69:8d:58:55:81:36:30:bd:86:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:AA:5F:2A:55:E3:5A:B5:94:63:B1:C9:3A:89:22:01:1A:BF:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:3c:2b:d2:3a:ce:9b:ef:d0:b5:b7:40:d8:a5:61:a7:c9:7b:
7d:7d:2c:2f:b4:f7:66:93:6e:8d:0c:4b:ac:36:1c:70:85:cb:
b7:a7:1b:94:01:e6:a3:88:5a:e9:81:fb:3e:10:5d:b5:0a:5b:
d5:d6:b2:c3:04:5f:8e:00:5a:44:d6:95:bf:f8:ab:a8:aa:c3:
5e:d2:9a:0e:c1:70:63:7e:83:26:5d:6e:95:7a:ff:02:5b:10:
4d:ba:d3:3d:0b:6c:a7:c3:fc:6c:94:86:3c:01:e7:fb:a0:85:
aa:9d:00:1c:05:b5:4f:fb:40:9a:da:9b:11:ca:0f:c6:e0:31:
b5:4e:2d:11:e8:89:25:6e:83:86:9f:fb:32:4f:e7:9f:9f:3e:
fb:db:87:78:e9:56:20:be:7c:cf:d9:9c:41:b8:38:95:ef:00:
20:b0:b2:58:b8:be:60:70:ba:a4:ec:a4:60:cc:cc:17:6c:ae:
24:1a:13:b8:d8:9e:9f:72:24:81:66:b0:99:bb:81:cc:c8:50:
11:fe:7d:01:36:76:f1:29:4b:1f:5a:bf:eb:c3:52:73:56:75:
e7:19:1d:7c:a1:03:0c:8e:63:45:dd:ec:cd:1c:91:06:6a:89:
84:64:d2:79:1e:38:29:76:34:6b:7b:94:e3:e9:da:7d:7a:b6:
d8:c4:cf:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psL7aJ2qaAvhGCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy
ZTBhMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
YmZlOWIwZjAtZTdhNy00MWUzLTkyMDMtNzBmNThiYmIxNDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjOAGNYGdrSWgwcN4rzOnF+sJZr21aP4eE5E
7Wd3WzuDajaK4ovw1NnvF+wZEgj/wwpdlQZQL3SraT77XonFnYsvMzn+CfMSxsjJ
VO0dPXuSy+m0zaVRgGvZY2/HRBHUfpbyY057vPO029g7bxaRUroMBl39eJa1RfGV
no92zGNgA0uSWaR/3mJ3ia6bV/3ISI8q4zEKDLSFu+QGl97nTyWOeSKeUzg2373I
ONwjj7sVwEQNv8ydzAghQvRvPKAFacBHfO6S+NzIYULJ+QysU/z6Ld4iOTLo5Mgr
d7A3zBwjv5kXdxPJFoNBphw3oCkjdOLZeq1pjVhVgTYwvYZSrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkJql8qVeNatZRjsck6iSIBGr9OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz
MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvZDY2NTBiOTItMjJiNy0z
ZDkwLThlNDAtNWJhZDM0ZjNiYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1
NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw
MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1
MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF48K9I6zpvv0LW3QNilYafJe319LC+092aTbo0MS6w2HHCFy7enG5QB
5qOIWumB+z4QXbUKW9XWssMEX44AWkTWlb/4q6iqw17Smg7BcGN+gyZdbpV6/wJb
EE260z0LbKfD/GyUhjwB5/ughaqdABwFtU/7QJramxHKD8bgMbVOLRHoiSVug4af
+zJP55+fPvvbh3jpViC+fM/ZnEG4OJXvACCwsli4vmBwuqTspGDMzBdsriQaE7jY
np9yJIFmsJm7gczIUBH+fQE2dvEpSx9av+vDUnNWdecZHXyhAwyOY0Xd7M0ckQZq
iYRk0nkeOCl2NGt7lOPp2n16ttjEz/c=
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:42:58 2026 by rpki-client